XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2023-2952 wireshark Fixed in: 3.4.16-0+deb11u1

References

• advisory github.com
• advisory nvd.nist.gov
• advisory security.gentoo.org
• advisory debian.org
• report gitlab.com
• web gitlab.com
• web lists.debian.org
• web wireshark.org
• web lists.debian.org